Job details
Salary $136,500 - $210,000 a year job type full-time
Full job description
Description
Job description:
Leidos` corporate information security (cis), cybersecurity operations, has an immediate opening for the director of the cybersecurity intelligence & response team (csirt)Leidos csirt takes an intelligence driven approach to cyber defense with a focus on threats, adversary tactics, techniques, and behaviors.
This is an opportunity to lead a team of highly skilled and innovative network defenders, and the best group of individuals out thereOur goal is to stay ahead of and maintain a technical advantage over our adversaries using the latest technical advancements, including custom built cybersecurity capabilitiesAs the leader your responsibilities will include leading the intrusions, digital forensics, and csirt development teams to monitor, detect, mitigate, perform incident response as well as partner with other teams and functions across the company to defend leidos.
*** this role will allow an individual to work remotely with the understanding that any customer or executive meeting the individual will need to travel on site.*** this will be a role that someone will be expected to travel as needed.
Primary responsibilities
Lead and execute the cyber defense for leidos 24/7/365
Monitor the external threat environment for emerging threats, advising relevant stakeholders, and supporting the coordination with external agencies, such as law enforcement and other advisory bodies, to ensure that the organization maintains a strong security posture
Continue to innovate our defensive processes and capabilities to support the company’s digital transformation to hybrid and multi-cloud environments
Partner with the business to demonstrate csirt’s capabilities driving business growth in cyber security
Coordinate and collaborate with industry partners, external agencies, and law enforcement
Lead incident response activities
Evolve csirt metrics to provide insight into our defensive posture, threats, and capability value to cybersecurity operations and cis leadership, enterprise risk teams, executive business leaders, and the board of directors as part of a strategic enterprise risk management program
Required qualifications
15 years of experience relevant to information technology and cybersecurity with at least 7 of those years in cybersecurity
Strong and demonstratable leadership skills and experience
Demonstratable experience communicating information security and risk-related concepts effectively to both technical and non-technical audiences
Demonstratable experience with cyber threat modeling frameworks (i.e., ckc, att&ck, diamond model, etc.)
Experience leading incident response activities
Strong problem-solving and analytical skills and demonstrate poise and ability to act calmly and competently in high-pressure, high-stress situations
Must have strong interpersonal and networking skills
Must have experience leading high performing security intelligence teams
Preferred qualifications
Ability to obtain a clearance
Bachelors degree
Active security clearance
Experience with “purple team” activities
Experience briefing senior and executive level leaders
Experience supporting to legal and other functions with forensic investigations
Experience with security orchestration, automation, and response (soar) tools
Experience with cyber kill chain and att&ck methodologies
Information security experience as a dod and/or intelligence community employee or contractor
Experience with the development, implementation, and maintenance of technical solutions
Demonstrated knowledge of common information security management frameworks such as iso/iec 27001, nist, cmmc, and an understanding of relevant legal and regulatory requirements such as health insurance portability and accountability act (hipaa) and payment card industry/data security standard.
Pay range:
Pay range $136,500.00 - $210,000.00 - $283,500.00
#remote
